CBC: Does CBC detect or block any modifications to the Windows "hosts" network file?
search cancel

CBC: Does CBC detect or block any modifications to the Windows "hosts" network file?

book

Article ID: 288236

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Does CBC detect or block any modifications or replacement of the Windows "hosts" network file?
 

Environment

  • Endpoint Standard Sensor
  • Endpoint Standard Sensor UI
  • Windows: All versions

Resolution

No, not "out of the box" (as of February 2021).
This capability is being considered with "DETECT-2398".

Additional Information

There are still the standard policy rules that can be written to accomplish this.